VS Code zero-day lets hackers steal GitHub tokens in one click:

neowin.net/news/vs-code-1142-gives-ai-agents-a-side-by-side-kanban-board-to-track-their-own-tasks/

Credibility C

Oct 15

VS Code 1.142 gives AI agents a side-by-side Kanban board to track their own tasks

github.com/krdanny/tl-lang

github.com Oct 02

GitHub - krdanny/tl-lang: TL (Token Language): a token-minimal programming language for LLMs that compiles to JavaScript, with benchmarks and a VS Code ...

neowin.net/news/visual-studio-code-1137-adds-voice-mode-and-automations/

Sep 10

Visual Studio Code 1.137 adds voice mode and automations: Developers can now schedule recurring AI agent tasks, talk via voice commands, and review GitHub pull ...

neowin.net/news/microsoft-releases-visual-studio-code-1133-heres-whats-new/

Aug 12

Microsoft releases Visual Studio Code 1.133, here's what's new: This update comes with several new features that should make the IDE easier to use ...

neowin.net/news/microsoft-updates-visual-studio-code-with-easier-language-model-discovery-and-in-app-search/

Jun 18

Microsoft updates Visual Studio Code with easier language model discovery and in-app search

bleepingcomputer.com/news/security/github-disables-microsoft-repos-pushing-password-stealing-malware/

Jun 09

GitHub disables Microsoft repos pushing password-stealing malware: Microsoft removed 73 repositories across its Azure, microsoft, Azure-Samples ...

2 similar articles

github.com Jun 10

GitHub - token-maxing/WebAI: AI Agent which uses your web platform AI subscriptions!

github.com/token-maxing/WebAI

scienspire.com/article/microsoft-breach-ai-code-assistants

scienspire.com Jun 08

If You Use Claude or Gemini, This Microsoft Breach Means Your Data Is at Risk: The Miasma worm supply chain attack on Microsoft-owned GitHub repositories targets ...

theregister.com/security/2026/06/03/another-bug-hunter-leaks-microsoft-exploits-in-defiance-of-companys-handling-of-vulnerability-disclosures/5250590

dlvr.it Jun 03

Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures

theregister.com/cyber-crime/2026/05/27/crowdstrike-google-shatter-glassworm-botnet/5247337

dlvr.it May 27

CrowdStrike, Google shatter Glassworm botnet: Developer-targeted, supply-chain attacks all the rage these days

3 similar articles

bleepingcomputer.com/news/security/github-confirms-breach-of-3-800-repos-via-malicious-vscode-extension/

May 20

GitHub confirms breach of 3,800 repos via malicious VSCode extension: GitHub has confirmed that roughly 3,800 internal repositories were breached after one of ...

16 similar articles

pcmag.com

May 20

Hackers Infiltrate GitHub by Compromising Employee Device: GitHub traced the breach to a malicious version of a Visual Studio Code extension ...

uk.pcmag.com/security/165082/hackers-infiltrate-github-by-compromising-employee-device

1 similar article

The New Stack May 16

GitHub takes aim at Claude Code and Codex with its new Copilot app: With its AI rivals already in the desktop agent race, GitHub bets its existing developer ...

thenewstack.io/github-copilot-desktop-app/

venturebeat.com/security/shai-hulud-worm-172-npm-pypi-packages-valid-provenance-ci-cd-audit

VentureBeat

May 12

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

windowscentral.com/software-apps/this-could-cost-people-their-jobs-vs-code-added-copilot-as-co-author-without-permission-or-notice

1 0

Windows Central May 06

"This could cost people their jobs": VS Code added Copilot as co-author without permission or notice

105

bleepingcomputer.com/news/security/fake-vs-code-alerts-on-github-spread-malware-to-developers/

Mar 27

Fake VS Code alerts on GitHub spread malware to developers: A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) ...

bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/

Mar 17

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...

1 similar article

6 1

tomshardware.com

Mar 14

Invisible malicious code attacks 151 GitHub repos and VS Code — Glassworm attack uses blockchain to steal tokens, credentials, and secrets

tomshardware.com/tech-industry/cyber-security/malicious-packages-using-invisible-unicode-found-in-151-github-repos-and-vs-code

thenewstack.io/vs-code-ai-copilot/

0 2

The New Stack Mar 11

Microsoft’s VS Code team moved to weekly releases after 10 years of monthly — and credits AI for making it possible

3 similar articles

neowin.net/news/microsoft-graduates-copilot-studio-extension-for-vs-code-to-general-availability/

Jan 15

Microsoft graduates Copilot Studio extension for VS Code to general availability: Developers can now build AI agents in VS Code with GitHub Copilot integration ...